src/fuse_operations.c

@@ -36,6 +36,7 @@
 #include <sys/file.h> /* flock(2) */
 
 #include "fuse_operations.h"
+#include "perm_permissions_table.h"
 #include "sourcefs.h"
 #include "ui-socket.h"
 
@@ -116,11 +117,12 @@ static int xmp_access(const char *path, int mask) {
     struct fuse_context *fc = fuse_get_context();
 
     pi.PID = fc->pid;
+    pi.UID = fc->uid;
     pi.name = get_process_name_by_pid(pi.PID);
 
     // fprintf(stderr, "%s, %d\n", path, ask_access(path, pi));
 
-    if (!interactive_access(real_filename(path), pi, 0)) {
+    if (!interactive_access(real_filename(path), pi)) {
       free(pi.name);
       return -EACCES;
     }
@@ -280,11 +282,12 @@ static int xmp_unlink(const char *path) {
 
   // ask the user for the permission for deleting the file
   pi.PID = fc->pid;
+  pi.UID = fc->uid;
   pi.name = get_process_name_by_pid(pi.PID);
 
   // fprintf(stderr, "%s, %d\n", path, ask_access(path, pi));
 
-  if (!interactive_access(real_filename(path), pi, 0)) {
+  if (!interactive_access(real_filename(path), pi)) {
     free(pi.name);
     return -EACCES;
   }
@@ -328,11 +331,12 @@ static int xmp_rename(const char *from, const char *to, unsigned int flags) {
   struct fuse_context *fc = fuse_get_context();
 
   pi.PID = fc->pid;
+  pi.UID = fc->uid;
   pi.name = get_process_name_by_pid(pi.PID);
 
   // fprintf(stderr, "%s, %d\n", path, ask_access(path, pi));
 
-  if (!interactive_access(real_filename(from), pi, 0)) {
+  if (!interactive_access(real_filename(from), pi)) {
     free(pi.name);
     return -EACCES;
   }
@@ -340,7 +344,7 @@ static int xmp_rename(const char *from, const char *to, unsigned int flags) {
   // the "to" file may exist and the process needs to get persmission to modify
   // it
   if (source_access(to, F_OK) == 0 &&
-      !interactive_access(real_filename(to), pi, 0)) {
+      !interactive_access(real_filename(to), pi)) {
     free(pi.name);
     return -EACCES;
   }
@@ -360,10 +364,11 @@ static int xmp_link(const char *from, const char *to) {
   struct fuse_context *fc = fuse_get_context();
 
   pi.PID = fc->pid;
+  pi.UID = fc->uid;
   pi.name = get_process_name_by_pid(pi.PID);
 
   // fprintf(stderr, "%s, %d\n", path, ask_access(path, pi));
-  if (!interactive_access(real_filename(from), pi, 0)) {
+  if (!interactive_access(real_filename(from), pi)) {
     free(pi.name);
     return -EACCES;
   }
@@ -385,10 +390,11 @@ static int xmp_chmod(const char *path, mode_t mode, struct fuse_file_info *fi) {
   struct fuse_context *fc = fuse_get_context();
 
   pi.PID = fc->pid;
+  pi.UID = fc->uid;
   pi.name = get_process_name_by_pid(pi.PID);
 
   // fprintf(stderr, "%s, %d\n", path, ask_access(path, pi));
-  if (!interactive_access(real_filename(path), pi, 0)) {
+  if (!interactive_access(real_filename(path), pi)) {
     free(pi.name);
     return -EACCES;
   }
@@ -416,10 +422,11 @@ static int xmp_chown(const char *path, uid_t uid, gid_t gid,
   struct fuse_context *fc = fuse_get_context();
 
   pi.PID = fc->pid;
+  pi.UID = fc->uid;
   pi.name = get_process_name_by_pid(pi.PID);
 
   // fprintf(stderr, "%s, %d\n", path, ask_access(path, pi));
-  if (!interactive_access(real_filename(path), pi, 0)) {
+  if (!interactive_access(real_filename(path), pi)) {
     free(pi.name);
     return -EACCES;
   }
@@ -475,14 +482,19 @@ static int xmp_create(const char *path, mode_t mode,
   struct fuse_context *fc = fuse_get_context();
 
   pi.PID = fc->pid;
+  pi.UID = fc->uid;
   pi.name = get_process_name_by_pid(pi.PID);
 
   // fprintf(stderr, "%s, %d\n", path, ask_access(path, pi));
 
-  if (!interactive_access(real_filename(path), pi, GRANT_PERM)) {
+  /*
+  if (!interactive_access(real_filename(path), pi)) {
     free(pi.name);
     return -EACCES;
   }
+  */
+
+  give_perm_access(real_filename(path), pi);
 
   free(pi.name);
 
@@ -500,10 +512,11 @@ static int xmp_open(const char *path, struct fuse_file_info *fi) {
   struct fuse_context *fc = fuse_get_context();
 
   pi.PID = fc->pid;
+  pi.UID = fc->uid;
   pi.name = get_process_name_by_pid(pi.PID);
 
   // fprintf(stderr, "%s, %d\n", path, ask_access(path, pi));
-  if (!interactive_access(real_filename(path), pi, 0)) {
+  if (!interactive_access(real_filename(path), pi)) {
     free(pi.name);
     return -EACCES;
   }

src/process_info.h

@@ -6,6 +6,7 @@
 struct process_info {
   pid_t PID;
   const char *name;
+  uid_t UID;
 };
 
 #endif // PROCESS_INFO_H

src/ui-socket.c

@@ -10,6 +10,7 @@
 #include <sys/types.h>
 #include <time.h>
 #define _GNU_SOURCE
+#include "cc.h"
 #include "perm_permissions_table.h"
 #include "temp_permissions_table.h"
 #include "ui-socket.h"
@@ -60,9 +61,9 @@ void destroy_ui_socket() {
  * GUI
  *
  * @param filename: The file that the process is trying to access
- * @param pi: The process information
- * @return: 0 if access is denied, 1 if access is allowed, 2 if access is
- * allowed for the runtime of the process
+ * @pram pi: The process information
+ * @return: 0 if access is denied, 1 if access is allowed, 2 if access is allwed
+ * for the runtime of the process
  */
 int ask_access(const char *filename, struct process_info pi) {
   FILE *fp;
@@ -114,28 +115,15 @@ int ask_access(const char *filename, struct process_info pi) {
  *
  * @param filename: The file that the process is trying to access
  * @pram pi: The process information
- * @param opts: options (GRANT_TEMP, GRANT_PERM)
  * @return: 0 if access is denied, 1 if access is allowed
  */
-int interactive_access(const char *filename, struct process_info pi, int opts) {
+int interactive_access(const char *filename, struct process_info pi) {
 
   if (check_temp_access(filename, pi) || check_perm_access(filename, pi)) {
     // access was already granted before
     return 1;
   }
 
-  // if noth GRANT_TEMP and GRANT_PERM are selected, then only permanent
-  // permissions are granted
-
-  if (opts & GRANT_PERM) {
-    give_perm_access(filename, pi);
-    return 1;
-  }
-  if (opts & GRANT_TEMP) {
-    give_temp_access(filename, pi);
-    return 1;
-  }
-
   int user_response = ask_access(filename, pi);
   if (user_response == 1) {
     // user said "yes"

src/ui-socket.h

@@ -38,10 +38,6 @@ void destroy_ui_socket(void);
  * @pram pi: The process information
  * @return: 0 if access is denied, 1 if access is allowed
  */
-int interactive_access(const char *filename, struct process_info pi, int opts);
-
-#define GRANT_TEMP 1
-#define GRANT_PERM 2
-// #define TABLE_ONLY 4 // NOTE: Add this in the future?
+int interactive_access(const char *filename, struct process_info pi);
 
 #endif // !UI_SOCKET_H